Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vcxck63nBkR3upL41Zz9-F2ijH8.roa
File: vcxck63nBkR3upL41Zz9-F2ijH8.roa (raw, json)
Hash identifier: h+RYFVMcyMvaIsbaLOm3CdD3ClbjHKfly0kKG3YrvrI=
Subject key identifier: BD:CC:5C:93:AD:E7:06:44:77:BA:92:F8:D5:9C:FD:F8:5D:A2:8C:7F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BB23C9830C5596B54B15C20F2F3425C31
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vcxck63nBkR3upL41Zz9-F2ijH8.roa
Signing time: Thu 09 Nov 2023 03:59:57 +0000
ROA not before: Thu 09 Nov 2023 03:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.87.73.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:3c:98:30:c5:59:6b:54:b1:5c:20:f2:f3:42:5c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 9 03:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdcc5c93ade7064477ba92f8d59cfdf85da28c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:18:12:53:05:c1:f5:f2:06:70:ed:47:25:
7f:e4:96:1b:99:41:f6:5b:e6:22:5e:e5:1f:91:91:
96:52:f8:a5:f2:cd:4b:0e:1d:31:4a:74:3b:dc:59:
40:91:bc:73:3c:ff:75:a2:40:f3:a8:81:f8:00:03:
fa:68:f3:4b:d6:fd:21:3a:44:54:88:f9:f7:cc:8d:
85:34:0b:93:96:a2:ce:39:11:d7:44:ae:4d:ed:c1:
c4:fa:20:13:8e:f4:89:0b:5c:1e:31:5e:38:85:92:
1e:ae:9d:a2:c4:86:b3:0a:f6:f7:ed:7e:c6:fa:db:
30:9b:0c:66:4a:3b:03:05:43:bd:09:43:8d:a9:56:
72:80:b6:53:83:73:93:f7:14:65:27:0c:49:e4:30:
0e:e8:82:98:ab:6a:68:c7:bb:03:2b:6c:bb:1e:01:
5f:a7:a7:6c:6e:fc:7a:7b:e3:50:c9:1e:98:09:f6:
86:54:c0:00:fd:49:30:fc:59:b6:7e:cd:3d:c3:fa:
25:1b:16:ea:1c:22:fc:ff:4c:18:b9:dd:37:c2:6c:
68:e4:92:4a:28:66:f5:ae:24:21:1f:7b:9d:1a:43:
3e:28:12:58:24:4b:01:80:b0:21:98:ab:9f:34:6e:
c3:ef:50:c4:14:97:ab:01:4f:33:46:31:93:d8:fa:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CC:5C:93:AD:E7:06:44:77:BA:92:F8:D5:9C:FD:F8:5D:A2:8C:7F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vcxck63nBkR3upL41Zz9-F2ijH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.73.0/24
194.87.90.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ea:c2:2a:b7:e3:97:b4:db:e3:4f:08:05:3a:02:4f:51:02:
ec:e3:03:0b:07:1e:70:7f:c0:6d:64:8b:c3:5d:5b:e0:b9:6b:
d7:a0:0e:21:71:2b:8a:0c:79:af:91:40:8f:39:3d:63:fa:0a:
20:31:5b:e9:54:95:d3:c0:83:fe:6b:39:c1:86:4f:f5:e6:7b:
e6:63:84:56:60:78:ec:da:17:4d:6e:a5:ef:5a:6b:91:6c:7d:
51:fa:da:19:75:14:bd:4c:83:06:f3:8c:87:f9:55:33:e0:3e:
4f:03:7c:08:00:79:86:80:e7:90:f1:ae:c6:06:7e:e7:54:0b:
1e:c1:6a:e5:73:4f:50:37:27:de:b9:79:85:0c:e8:39:7e:4c:
f4:f2:56:93:3c:2d:7d:5e:e3:a4:e6:e7:e0:e2:70:18:a8:d0:
cd:c0:1b:06:f0:85:5b:f8:1a:a3:70:3a:3f:40:7d:26:38:e7:
34:f2:86:77:4d:5f:9f:88:c3:af:40:19:41:51:8b:aa:e7:59:
ab:5b:6c:c0:3e:8e:b1:8c:1e:fc:a1:02:3a:58:c2:b7:2f:be:
1e:13:c9:70:b6:c3:3f:b2:06:63:34:7a:41:0b:40:8e:da:44:
58:28:54:84:61:79:d2:1f:01:f5:9b:49:3b:43:21:f1:21:f7:
c0:80:94:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuyPJgwxVlrVLFcIPLzQlwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTA5MDM1OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGNjNWM5M2FkZTcwNjQ0NzdiYTkyZjhkNTljZmRmODVkYTI4YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVAYElMFwfXyBnDtRyV/5JYbmUH2
W+YiXuUfkZGWUvil8s1LDh0xSnQ73FlAkbxzPP91okDzqIH4AAP6aPNL1v0hOkRU
iPn3zI2FNAuTlqLOORHXRK5N7cHE+iATjvSJC1weMV44hZIerp2ixIazCvb37X7G
+tswmwxmSjsDBUO9CUONqVZygLZTg3OT9xRlJwxJ5DAO6IKYq2pox7sDK2y7HgFf
p6dsbvx6e+NQyR6YCfaGVMAA/Ukw/Fm2fs09w/olGxbqHCL8/0wYud03wmxo5JJK
KGb1riQhH3udGkM+KBJYJEsBgLAhmKufNG7D71DEFJerAU8zRjGT2PpxXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL3MXJOt5wZEd7qS+NWc/fhdoox/MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdmN4Y2s2M25Ca1IzdXBMNDFaejktRjJpakg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwldJAwQA
wldaMA0GCSqGSIb3DQEBCwUAA4IBAQBw6sIqt+OXtNvjTwgFOgJPUQLs4wMLBx5w
f8BtZIvDXVvguWvXoA4hcSuKDHmvkUCPOT1j+gogMVvpVJXTwIP+aznBhk/15nvm
Y4RWYHjs2hdNbqXvWmuRbH1R+toZdRS9TIMG84yH+VUz4D5PA3wIAHmGgOeQ8a7G
Bn7nVAsewWrlc09QNyfeuXmFDOg5fkz08laTPC19XuOk5ufg4nAYqNDNwBsG8IVb
+BqjcDo/QH0mOOc08oZ3TV+fiMOvQBlBUYuq51mrW2zAPo6xjB78oQI6WMK3L74e
E8lwtsM/sgZjNHpBC0CO2kRYKFSEYXnSHwH1m0k7QyHxIffAgJRl
-----END CERTIFICATE-----
Generated at Fri Nov 10 04:28:50 2023 by rpki-client on console-fra.rpki-client.org